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CLAIM LISTING 

1. (previously presented) A method for sharing data including the steps of. 
receiving, from a user of a client, a request for data from a server; 
obtaining access rights for the usen and 

downloading to the client the access rights, the data, and an applet, the 
applet being operable to customize a display of the data by the client according to 
the access rights. 

2. (previously presented) The invention of Claim 1 further comprising verifying 
that the user has access rights for the data. 

3. (previously presented) The invention of Claim 2 wherein the step of 
veriiying includes the step of authenticating a digital signature. 

4. (previously presented) The invention of Claim 2 wherein the step of 
verifying includes the step of authenticating a private key, 

5. (previously presented) The invention of Claim 2 wherein the step of 
verifying includes the step of authenticating a public key. 

6. (cancelled) 

7. (previously presented) The invention of Claim 1 further including the step of 
allowing modification of the data according to the access rights. 

8. (original) The invention of Claim 1 further including the step of tracking 
changes in said document 
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9. (original) The invention of Claim 1 further including the step of tracking 
access of said document 

10. (original) The invention of Claim 1 further including the step of tracking 
submission of documents. 

11. (cancelled). 

12. (previously presented) The invention of Claim 1 further including the step 
of the applet causing the client to display a view of the data for the user, the view 
being customized according to the access rights. 

13. (Previously presented) A document management system comprising: 

a server for providing data from a document stored in a folder, the sen/er 
operable to receive, from a user of a client a request for the data; 

an agent associated with said folder, the agent operable to obtain access 
rights for the user and to cause the sen/er to download to the client the access 
rights, the data, and an applet the applet being operable to customize a display of 
the data by the client according to the access rights. 

14. (canceled) 

15. (previously presented) The invention of Claim 13 wherein the agent is 
operable to encrypt the data and the access rights and the applet is operable to decrypt 
the data and the access rights. 

16* (previously presented) The invention of Claim 13, further comprising means 
for allowing modification of the data according to the access rights, 

17. (cancelled) 
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18. (previously presented) The invention of Claim 13 further including means 
for verifying a user's identity before the agent causes the server to download the 
data to the client. 

19. (cancelled) 

20. (Canceled) 

21. (cancelled) 

22. (previously presented) The method of Claim 1 wherein downloading 
includes downloading the accesses rights and the data with a session key, wherein 
the access rights and the data have been encrypted with the session key and the 
session key has been encrypted with a public key for the user 

23. (previously presented) The method of Claim 22 wherein the applet is 
operable to decrypt the session key with a private key for the user and to decrypt the 
data and the access rights with the decrypted session key. 

24-26. (cancelled) 

27. (previously presented) The method of Claim 22 further comprising 
randomly generating the session key, 

28. (cancelled) 

29. (preN^'ously presented) The invention of Claim 13, further comprising 
means for encrypting the data and the access rights with a session key and means 
for encrypting the session key with a public key for the user, and wherein the agent 
is operable to cause the server to download the encrypted session key to the client 
along with the applet, the encrypted access rights, and the encrypted data. 
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30. (currently amended) The invention of Claim 2© 29, wherein the applet is 
operable to decrypt the session key with a private key for the user and to decrypt the 
data and the acx:ess rights with the decrypted session key. 

31-33 (cancelled) 

34. (previously presented) The invention of Claim 29 further including means 
for randomly generating said session key. 

35. (previously presented) The invention of Claim 13 wherein said access 
rights are stored in a database. 
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